CVE-2026-40386CWE-191

In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak…

Medium · published April 12, 2026

CVSS v3.1
4.0
EPSS
0%
Percentile
2.5
In the wild
Unconfirmed
What it is

In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.

The record
Technical detail
CVSS v3.1
4.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00131 · 2.5th percentile
Weakness
CWE-191 · Integer Underflow (Wrap or Wraparound)
Published
2026-04-12T18:19Z
EPSS history
Timeline
  • 12 APR 18:19Z
    In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak…
    cvelistv5